viplist permission checks

code/moya-beans/ejbModule/fi/codecrew/moya/beans/VipBean.java

@@ -57,6 +57,7 @@ public class VipBean implements VipBeanLocal {
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public void create(Vip vip) {
 		vip.setCreated(new Date());
 		vip.setCreator(permbean.getCurrentUser());
@@ -69,12 +70,14 @@ public class VipBean implements VipBeanLocal {
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public void delete(Vip vip) {
 		vip = vipFacade.merge(vip);
 		vipFacade.remove(vip);
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_VIEW })
 	public Vip find(Integer id) {
 		return vipFacade.find(id);
 	}
@@ -86,6 +89,7 @@ public class VipBean implements VipBeanLocal {
 	//	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public Vip createProduct(VipProduct l) {
 		Vip vip = vipFacade.reload(l.getVip());
 		l.setVip(vip);
@@ -98,23 +102,27 @@ public class VipBean implements VipBeanLocal {
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_VIEW })
 	public SearchResult<Vip> search(SearchQuery sq) {
 		// TODO Auto-generated method stub
 		return null;
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public Vip save(Vip vip) {
 		return vipFacade.merge(vip);
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public Vip saveProduct(VipProduct prod) {
 		VipProduct ret = vipProductFacade.merge(prod);
 		return ret.getVip();
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_EDIT })
 	public Vip deleteProduct(VipProduct l) {
 		l = vipProductFacade.reload(l);
 		Vip vip = l.getVip();
@@ -124,6 +132,7 @@ public class VipBean implements VipBeanLocal {
 	}
 
 	@Override
+	@RolesAllowed({ VipPermission.S_USAGE })
 	public VipProductDelivery createDelivery(VipProduct prod, BigDecimal quantity, String notes) {
 		prod = vipProductFacade.reload(prod);